ssh: disable SSHFP key lookup

xddxdd · Dec 9, 2024 · da4545e · da4545e
1 parent 243b5cb
commit da4545e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/nixos/minimal-components/ssh-harden.nix b/nixos/minimal-components/ssh-harden.nix
@@ -147,7 +147,8 @@ in
       PubkeyAcceptedAlgorithms +ssh-rsa
 
       StrictHostKeyChecking no
-      VerifyHostKeyDNS yes
+      # DNS lookup is slow, use predefined knownHosts for my servers
+      VerifyHostKeyDNS no
       LogLevel ERROR
 
       TcpRcvBufPoll yes